Cyber Security Engineer, OGAM

General Position Summary

The role involves supervising the Cybersecurity of the Information Technology (IT) and Operational Technology (OT) networks for end-to-end Cybersecurity Services to secure the critical infrastructure of Osaka Gas Asset Management (OGAM) assets. Responsibilities will include reviewing IT security reports, ensuring prompt implementation of corrective actions, verifying security patches, and overseeing IT asset compliance. Additionally, the position focuses on enhancing OGAM Assets IT network security and supporting OGUSA-IT operations and projects.

The candidate will be responsible for understanding and mitigating the cyber risks associated with OGAM assets and maintaining Cybersecurity controls at these assets.

Essential Job Functions 

OGAM shares a common objective to increase cybersecurity posture at its assets with its partners and operation services provider. This job requires building and fostering a collaborative working relationship to maintain the visibility and security of its assets. The essential job functions will include:

Supervising Cyber Security of Operational Technology (OT) and IT systems at OGAM Assets (50%)

·       Define a clear cybersecurity roadmap in conjunction with Cybersecurity consultant for the OGAM assets.

·       Identify, document, and manage Cybersecurity policies and standards for all OGAM assets and ensure that these policies are implemented and followed to manage and maintain security.

·       Build and manage an effective Incident Response and Recovery plan in conjunction with the Cybersecurity consultant.

·       Leverage monitoring and detection capabilities of the networks and endpoints at OGAM Assets.

·       Assist the Cybersecurity consultant in vulnerability and firewall rule assessments. Ensure that the Managed Service Provider (MSP) implements recommended changes at OGAM assets.

·       Ensure corrective actions from the cybersecurity consultant are promptly implemented by MSP.

·       In case of a cyber incident, report immediately to the VP, Asset Management, and follow the Incident Response Plan (IRP). Implement swift countermeasures and coordinate with relevant parties. After resolution, communicate the incident details, damages, and prevention plans to management and partners.

Supervising IT Managed Service Providers (MSP) at OGAM Assets (40%)

·       Review the following IT assets provided by MSP to ensure compliance with IT security policies.

·       Inventory list of Computers, Network devices, and other IT devices that contain confidential business data.

·       Inventory list of Software licenses and subscriptions

·       Inventory of account lists for Windows and other business applications

·       Supervise IT asset disposition under the IT security policies.

·       Maintain the inventory of network and end-point devices that contain confidential business data, identify and manage lists of software licenses and subscriptions, and ensure the data in the cloud environment is secure.

·       Develop and maintain a lifecycle replacement plan for network and end-point devices and software packages at OGAM assets to assist with planning for upgrades and replacements.

Improve the security of IT networks at OGAM Assets (10%)

·       Develop secure network design for OGAM Assets by isolating the IT network from the OT network.

·       Initiate and execute the project with the approval of OGAM management

Responsibilities will include:

·       Maintain and develop relationships with OGAM Cybersecurity consultants, MSPs at OGAM assets, and any other OGAM stakeholders.

·       This position will report to the Vice President, Asset Management and have cross-functional responsibilities to the Director, Plant Operations in the OGUSA New York office.

Requirements

Education

·       Bachelor’s or Master’s degree in computer science.

·       Certifications in Cybersecurity like CRISC, CISSP etc.

 Experience

·       At least 5 years of related industry experience

·       Experience in power generation a plus.

·       Experience with industrial cybersecurity standards and guidelines such as ISA/IEC 62443, NIST, and NERC CIP a plus.

·       Understanding of networking principles and protocols (e.g. TCP/IP, Ethernet)

·       Experience with network security protocols (e.g. VPN, SSH) and firewall configuration.

·       Project management experience.

·       Possess analytical, organizational, and reporting skills.

·       Work in a multi-cultural office environment.

Preferred Certifications

-